WHAp^S CLAIMED IS 

lyC A data packet classifier to classify a plurality of N-bit input tuples, said 
classifies comprising : 

a hash address generator to generate a plurality of M-bit hash addresses 
from said plurality of N-bit input tuples, wherein M is significantly smaller than 
N; 

a memory ha\>mg a plurality of memory entries, said memory being 
addressable by said pluKality of M-bit hash addresses, each such address 
corresponding to a plurality of memory entries, each of said plurality of memory 
entries capable of storing onespf said plurality of N-bit tuples and an associated 
process flow information; \^ 

a comparison unit to determi*r;;ie^ if an incoming N-bit tuple can be matched 
with a stored N-bit tuple, wherein saidNassociated process flow information is 
output if a match is found and wherein a\iew entry is created in the memory for 
the incoming N-bit tuple if a match is not fourid. 



2. The data packet classifier of claim 1 further conWising: 

a content addressable memory (CAM) to store overHowing N-bit tuples 
and their corresponding flow information wherein said overflovv^jng N-bit tuple 
cannot be stored in the memory. 



3. The data packet classifier of claim 1 wherein said process flow infoi^mation 
in the memory comprises a flow identification number. 
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4. '\The data packet classifier of claim 1 wherein said process flow information 

in uKie memory can be updated. 

5. Tlie data placket classifier of claim 1 wherein an entry in the memory can be 
deleted. 

6. The data packet cla^ifier of claim 1 wherein searching for an entry in the 
memory can be ceasedS^hen a kill-process command is received. 

The data packet classifier of cl^m 2 wherein said process flow information 
in the CAM comprises a process fidw identification number. 

8. The data packet classifier of claim 2 wher^n said process flow information 
in the CAM can be updated. 

9. The data packet classifier of claim 2 wherein an en\y in the CAM can be 
deleted. 

10. The data packet classifier of claim 2 wherein searching for a^entry in the 
CAM can be ceased when a kill-process command is received. 



11. The data packet classifier of claim 2 further capable of generating a\trap if 
both the memory and the CAM are full. 
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1^2- The data packet classifier of claim 2 wherein both the memory and CAM are 
se^ched in parallel. 

13. The data packet classifier of claim 2 wherein N > 96. 

14. The data pabket classifier of claim 13 wherein said hash address generator 
performs hashiNig on a first 96 bits of an associated N-bit tuple. 

15. The data packet classifier of claim 14 wherein a comparison of tuple stored 
in the memory and anVicoming tuple Is performed using three 32-bit 
comparators and standar^l6 or 32 bit wide memories. 

/A network system comprising asi)lurality of nodes, each of said nodes 
having a unique N-bit tuple, each\f said plurality of nodes comprising a 
data packet classifier, said data packtet classifier comprising: 

a hash address generator to generateXa plurality of M-bit hash addresses 
from said plurality of N-bit input tuples, wl^rein M is significantly smaller 
than N; \ 

a memory having a plurality of memory entrieV said memory being 
addressable by said plurality of M-bit hash addresses, each such address 
corresponding to a plurality of memory entries, eachVf said plurality of 
memory entries capable of storing one of said plurality V N-bit tuples and 
an associated process flow information; \ 

a comparison unit to determine if an incoming N-bitVjple can be 
matched with a stored N-bit tuple, wherein said associated process flow 
information is output if a match is found and wherein a new entr\ is created 

in the memory for the incoming N-bit tuple if a match is not found\ 
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iX. The data packet classifier of claim 16 further comprising: 

a^qontent addressable memory (CAM) to store overflowing N-bit tuples 
and their coKresponding process flow information wherein said overflowing N-bit 
tuple cannot be stored in the memory. 

18. The data packet cl^sifier of claim 16 wherein said process flow information 
in the memory comprises a process flow identification number. 

19. The data packet classifier ondaim 16 wherein said process flow information 
in the memory can be updated.X 

20. The data packet classifier of claim 16 Mierein an entry in the memory can 
be deleted. \ 

21. The data packet classifier of claim 16 wherein searching for an entry in the 
memory can be ceased when a kill-process command is received. 

22. The data packet classifier of claim 17 wherein said processSflow information 
in the CAM comprises a process flow identification number. 



23. The data packet classifier of claim 17 wherein said process flow inforrrV^tion 
in the CAM can be updated. 
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24. The data packet classifier of claim 17 wherein an entry in the CAM can be 
dieted. 




25. The dara packet classifier of claim 17 wherein searching for an entry in the 
CAM can yte^ ceased when a kill-process command is received. 



26. The data packet dassifier of claim 17 further capable of generating a trap if 
both the memory and the CAM are full. 

27. The data packet classifier ©J" claim 17 wherein both the memory and CAM 
are searched in parallel. 

28. The data packet classifier of claim is^ wherein N > 96. 

29. The data packet classifier of claim 17 whe'^in said hash address generator 
performs hashing on a first 96 bits of an assdciated N-bit tuple. 



30. The data packet classifier of claim 29 wherein a cornparison of tuple stored 
in the memory and an incoming tuple is performed usHpg three 32-bit 
comparators. 



A method of generating an M-bit hash address from an N-bit ir\put tuple 
comprising: 

a) splitting said N-bit input tuple into a first range of X bits and a s^ond 
range of Y bits, where X is equal to or smaller than M; 
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)) applying a hash function to said X bits to generate a white hash address 

.Z bits, where Z is equal to or smaller than M; 
c) creating said M-bit hash address by combining said Z-bit white hash 
address \nd said second range of Y bits using a Boolean operator. 

32. The method of claim 31 wherein X is significantly larger than Y. 

33. The method of clarm 31 wherein X is significantly larger than Z. 



34. The method of claim sivwherein said Boolean operator is an OR. 



35. The method of claim 31 wherein said Boolean operator is an XOR. 



36. The method of claim 31 wherein W is 104. 



37. The method of claim 36 wherein X is 95 and Y is 8. 



38. The method of claim 37 wherein Z is 20 anovM is 20. 




A computer program product, including a computer-readable medium 
comprising instructions, said instructions enabling k computer to perform a 
hashing function on an N-bit input tuple according to Vie following steps: 

a) splitting said N-bit input tuple into a first range of X m^s and a second 
range of Y bits; 

b) applying a hash function to said X bits to generate a white\|nash address 
with Z bits; 
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c) creating said M-bit hash address by combining said Z-bit white hash 
address and said second range of Y bits using a Boolean operator. 



The program product of claim 39 wherein X is significantly larger than Y. 



41. The program product of claim 39 wherein X is significantly larger than Z. 



42. The progranrsproduct of claim 39 wherein said Boolean operator is an OR. 



43. The program product of claim 39 wherein said Boolean operator is an XOR. 



44. The program product of claim 39 wherein N is 104. 



45. The program product of claim 44\^herein X is 96 and Y is 8. 



46. The program product of claim 45 whereito Z is 20 and M is 20. 




A computer program product, including a computer-readable medium 
comprising instructions, said instructions comprisir 
a hash address generator code to enable a computer fte generate a plurality 
of M-bit hash addresses from said plurality of N-bit input\jples, wherein M 
is significantly smaller than N; 

a memory code to enable a computer to store data in a memory having a 
plurality of memory entries, said memory code further enabling 
computer to address said plurality of M-bit hash addresses, each of^aid 

plurality of memory entries capable of storing one of said plurality of 
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tuples and an associated process flow Infornnation; 

a\x)mparison code to determine if an inconning N-bit tuple can be matched 
with\ stored N-bit tuple, wherein said associated process flow information 
is output if a match is found and wherein a new entry is created in the 
memory for the incoming N-bit tuple if a match is not found. 

48. The computerVrogram product of claim 47 further comprising: 

a content addres^^le memory (CAM) code to enable a computer to store 
overflowing N-bit tuples ahd their corresponding process flow information in a 
CAM wherein said overfiowingsN-bit tuple cannot be stored in the memory. 



49. The computer program code oKclaim 47 wherein said process flow 
information in the memory comprises a flow identification number. 



50. The computer program code of claim 47^^herein said instructions enable a 
computer to update the process flow inforrnation. 



51. The computer program code of claim 47 wherei\said instructions enable a 
computer to delete an entry in the memory. 

52. The computer program code of claim 47 wherein said ins\|^tions enable a 
computer to cease searching for an entry in the memory when a kill- 
process command is received. 

53. The computer program code of claim 48 wherein said process flow 

information in the CAM comprises a flow identification number. 
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k The computer program code of claim 48 wherein said instructions enable a 
)mputer to update the process flow information in the CAM. 

55. The computer program code of claim 48 wherein said instructions enable a 
computer to de^te an entry in the CAM. 

56. The computer program csKJe of claim 48 wherein said instructions enable a 
computer to cease searching^r an entry in the CAM when a kill-process 
command is received. 

57. The computer program product of claim ^ wherein said instructions enable 
the computer to generate a trap if both the m£jmory and the CAM are full. 

58. The computer program product of claim 48 wherein\aid instructions enable 
a computer to search both the memory and CAM in parallel. 

59. The computer program product of claim 48 wherein N > 96. 



60. The computer program product of claim 59 wherein said hash addressN 
generator code enables a computer to performs hashing on a first 96 bits"^ 
an associated N-bit tuple. 
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61. The computer program product of claim 60 wherein said comparison code 
eTTafel^s the computer to compare an address stored in the memory and an 
incoming tupl^'^bi^g three 32-bit comparators. 



62. The method of claim 31 wherein s>i<Boolean operator is an "AND" 



63. The computer program product of claim 39 whereif^s^id Boolean operator 
is an "AND". 
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